hi, thanks all for your input. I got it working creating an Idm group 'libvirt' and adding the pertinent AD external groups to this idm posix group called libvirt. Now I can connect to the system bus and watch the serial console of the vm as a normal user.
Thanks, -- regards, Natxo
